Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 12:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ravin.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ravin.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target Ravin.exe
- Size 89.2MB
- Sample260930-pnjs7svs8l
- SHA256 598ff694960cd12661b9d9c6ede9664bd0c4ee2853272c7dabfeb872da022d34
- MD5 6e0f510dcab6850d99927efbc422749e
- SHA1 4ba478eb35064a08a7a8decf944001196bdc144a
- SHA512 ddfc87764655b1f2461ebfc9ab8ce21315a968cb5c73e5c6842f413a599fc4ac09669e506724b334ee6e6863500897e9ef03a914b0b81a1e5c296807cf44fa88
- SSDEEP 786432:I4Qm1HRhh1EI8eOtdt5Utd4iTKMn3KhvBDRf4f6Vkxpfe13br5:I47Ytd0tdxTKMnahvBDpuSkxpI
- TLSH T145286D52F6048D35C09A0B3E495B867063326C579FA3A39722DCBB7D3DBA3805E72746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Ravin.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 5056 Ravin.exe 5056 Ravin.exe 5056 Ravin.exe 5056 Ravin.exe